[](https://www.paloaltonetworks.com/?ts=markdown) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products Products AI Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) Network Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) SASE [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) Security Operations [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) Cloud Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) Observability ^NEW^ [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) Identity Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [![Overview icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Overview](#products-panel-0) * [![AI Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) AI Security](#products-panel-1) * [![Network Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Network Security](#products-panel-2) * [![SASE icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) SASE](#products-panel-3) * [![Security Operations icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Security Operations](#products-panel-4) * [![Cloud Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Cloud Security](#products-panel-5) * [Observability ^NEW^](#products-panel-6) * [![Identity Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Identity Security](#products-panel-7) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) [![AI Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg) AI Security Discover, assess and protect AI apps, agents and employee use of GenAI tools](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [![Network Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg) Network Security AI-powered NetSec with next-gen firewalls, inline defense and unified management](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Security Operations icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg) Security Operations Stop cyberattackers with the industry's premier platform for autonomous security operations](https://www.paloaltonetworks.com/cortex?ts=markdown) [![Observability \& Remediation NEW icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg) Observability \& Remediation ^NEW^ Prevent downtime with the AI-driven platform that delivers autonomous remediation](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![SASE icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg) SASE Protect with AI, secure AI use and operate with AI using agentic Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) [![Identity Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg) Identity Security Identity security platform to secure every identity: human, machine and agentic](https://www.paloaltonetworks.com/idira?ts=markdown) [![Cloud Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg) Cloud Security Prevent risks from code to cloud with the leading agentic cloud security platform](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![AI Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) [![Network Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) [![SASE logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) [![Security Operations logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) [![Cloud Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) [![Observability NEW logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) [![Identity Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * Solutions Solutions By Use Case [![Drive AI Transformation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ai-page/teaser-block/teaser-icon-2.svg) Drive AI Transformation Scale enterprise AI adoption across employees, applications and agents with confidence and control](https://www.paloaltonetworks.com/ai-security?ts=markdown) [![Accelerate Cloud Transformation icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Accelerate Cloud Transformation Build fast and innovate fearlessly with AI-driven protection from code to cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![Secure AI Coding icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure AI Coding Let AI coding do more, with you in control. Protect data, govern agents and control AI costs](https://www.paloaltonetworks.com/secure-ai-coding?ts=markdown) [![Secure Every Identity icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Secure Every Identity Stop identity-led breaches: Secure human, machine, and agentic identities with zero trust](https://www.paloaltonetworks.com/idira?ts=markdown) [![Enable Autonomous SOC icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Enable Autonomous SOC Fight AI with AI to stop threats at machine speed with the power of analytics and automation](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) [![Secure Critical Infrastructure icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure Critical Infrastructure Stop machine-speed threats across OT, 5G and IoT with AI-driven cyber defense](https://www.paloaltonetworks.com/securing-critical-infrastructure?ts=markdown) [![Secure the Hybrid Network icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Secure the Hybrid Network Stay ahead of AI-driven attacks with unified network security across hybrid environments](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Automate Root-Cause Analysis icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Automate Root-Cause Analysis Respond autonomously to incidents and accelerate remediation with agentic AI](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![Frontier AI Defense icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-Unit42.svg) Frontier AI Defense Use defender-grade models to stop AI-speed attacks before they start](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * Services Services Security Services [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) Customer Services [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Services Overview](#services-panel-0) * [Security Services](#services-panel-1) * [Managed Firewalls](#services-panel-2) * [Customer Services](#services-panel-3) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) [![Security Services logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) * Industries Industries [![Financial Services icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/financial-icon-2.svg) Financial Services Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) [![Manufacturing icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/manufacturing-icon-2.svg) Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) [![Retail and Hospitality icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/retail-icon-2.svg) Retail and Hospitality Secure with payment security, PCI compliance, ransomware and fraud prevention, and data protection](https://www.paloaltonetworks.com/industry/retail?ts=markdown) [![Healthcare and Life Sciences icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/healthcare-icon-2.svg) Healthcare and Life Sciences Secure patient and clinical data, medical device security, ransomware defense, and HIPAA compliance](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) [![Public Sector icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/public-sector-icon-2.svg) Public Sector Secure with Zero Trust, cyber defense, compliance, infrastructure protection, and citizen data security](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) [![Utilities icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/utilities-icon-2.svg) Utilities Secure with power grid protection, OT network security, ransomware defense, and critical infrastructure security](https://www.paloaltonetworks.com/industry/electric-utilities?ts=markdown) [![Transportation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/transportation-icon-2.svg) Transportation Secure OT and connected infrastructure protection, ransomware defense, supply chain security, compliance](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) [![Small and Medium Business icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/smb-icon-2.svg) Small and Medium Business Secure against cyber threats using AI-powered endpoint, network, browser, cloud, and MDR](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Partners Partners NextWave * [Partner Program](https://www.paloaltonetworks.com/partners/nextwave-partner-portal-login?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Partner Portal Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Partner Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) Partner Ecosystem [Explore All Partners Find the right partner network tailored to your business needs, cloud environments, and security requirements](https://www.paloaltonetworks.com/partners?ts=markdown) [Cloud Service Partners Bring cloud native security and compliance to the entire development lifecycle](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) [Frontier AI Alliance Outpace today's cyberattacks through a global ecosystem of leaders orchestrating unified defenses](https://www.paloaltonetworks.com/frontier?ts=markdown) [Global System Integrators Speed and secure digital transformation with the industry's best technology, people and intelligence](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) [Managed Security Service Providers Gain valuable resource oversight to help your businesses administer security strategies](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) [Resellers Deliver the most comprehensive cybersecurity portfolio while expanding opportunities and profitability](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) [Service Providers Protect mobile users, devices and applications with effective, flexible and easy to deploy cybersecurity](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) [Technology Partners Advance security and transformation with innovative technology partner integrations](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * Resources Resources ![Learn icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/resource-library-icon.svg) Learn * [Resource Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Analyst Reports](https://www.paloaltonetworks.com/resources/research?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Threat Vector Podcast](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Knowledgebase](https://knowledgebase.paloaltonetworks.com/) * [Technical Documentation](https://docs.paloaltonetworks.com/) ![Engage icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/engage-icon-2.svg) Engage * [Webinars](https://www.paloaltonetworks.com/resources/webinars?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Test Drive](https://www.paloaltonetworks.com/resources/test-drives?ts=markdown) * [On-Demand](https://www.paloaltonetworks.com/ondemand?ts=markdown) ![Connect icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/connect-icon-2.svg) Connect * [Executive Briefings](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Events](https://events.paloaltonetworks.com/) * [Live Community](https://live.paloaltonetworks.com/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) ![Discover icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/discover-icon-2.svg) Discover * [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) ![Company icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Office Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * ![search magnifying glass](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * us Language * USA (ENGLISH) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au/cyberpedia/identity-threat-detection-and-response-itdr) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br/cyberpedia/identity-threat-detection-and-response-itdr) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca/cyberpedia/identity-threat-detection-and-response-itdr) * [CHINA (简体中文)](https://www.paloaltonetworks.cn/cyberpedia/identity-threat-detection-and-response-itdr) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr/cyberpedia/identity-threat-detection-and-response-itdr) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de/cyberpedia/identity-threat-detection-and-response-itdr) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in/cyberpedia/identity-threat-detection-and-response-itdr) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it/cyberpedia/identity-threat-detection-and-response-itdr) * [JAPAN (日本語)](https://www.paloaltonetworks.jp/cyberpedia/identity-threat-detection-and-response-itdr) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr/cyberpedia/identity-threat-detection-and-response-itdr) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat/cyberpedia/identity-threat-detection-and-response-itdr) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx/cyberpedia/identity-threat-detection-and-response-itdr) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg/cyberpedia/identity-threat-detection-and-response-itdr) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es/cyberpedia/identity-threat-detection-and-response-itdr) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw/cyberpedia/identity-threat-detection-and-response-itdr) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk/cyberpedia/identity-threat-detection-and-response-itdr) * Accounts \& Support Accounts \& Support * Accounts * Customer * Partner * Employee * [Login to Download](https://www.paloaltonetworks.com/login?ts=markdown) * [Become a Member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * Support * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) [Introducing Cortex XCOR: Observability, reimagined. Discover now.](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [Security Operations](https://www.paloaltonetworks.com/cyberpedia/security-operations?ts=markdown) 3. [Security Operations](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations?ts=markdown) 4. [What Is Identity Threat Detection and Response (ITDR)?](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr?ts=markdown) Table of Contents * [Best Rapid7 Competitors \& Alternatives](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives?ts=markdown) * [Reasons to Consider Rapid7 Competitors](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#reasons?ts=markdown) * [Top 3 Rapid7 Competitors in 2026](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#top-competitors?ts=markdown) * [Rapid7 Exposure Management Competitors](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#Rapid7Competitors?ts=markdown) * [Rapid7 Attack Surface Management Competitors](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#competitors?ts=markdown) * [Rapid7 SIEM Competitors](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#siem?ts=markdown) * [Rapid7 Competitors and Alternatives FAQs](https://www.paloaltonetworks.com/cyberpedia/rapid7-competitors-and-alternatives#faqs?ts=markdown) * [What Is Security Operations (SecOps)? Comprehensive Guide](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations?ts=markdown) * [Security Operations (SecOps) Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#secops?ts=markdown) * [The Pillars of Modern SecOps: People, Process, and Technology](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#pillars?ts=markdown) * [Example Scenario: Incident Response to a Malware Alert](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#example?ts=markdown) * [Proactive Security Operations Examples](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#proactive?ts=markdown) * [Technology: Core Tools for the SOC](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#technology?ts=markdown) * [Core Components and Functions of the SOC](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#core?ts=markdown) * [SecOps vs. DevOps vs. DevSecOps](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#vs?ts=markdown) * [Security Operations FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations#faqs?ts=markdown) * What Is Identity Threat Detection and Response (ITDR)? * [Understanding ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#understanding?ts=markdown) * [ITDR vs Other Security Concepts (IAM, XDR, SIEM)](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#vs?ts=markdown) * [Key Components of ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#key?ts=markdown) * [Implementing Effective ITDR Strategies](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#strategies?ts=markdown) * [Identity-Based Attacks: Challenges and Solutions](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#solutions?ts=markdown) * [Future Trends in Identity Threat Detection and Response](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#future?ts=markdown) * [ITDR FAQs](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#faqs?ts=markdown) * [Best Sumo Logic Competitors \& Alternatives for 2026](https://www.paloaltonetworks.com/cyberpedia/sumo-logic-competitors-and-alternatives?ts=markdown) * [Key Reasons to Examine Sumo Logic Competitors](https://www.paloaltonetworks.com/cyberpedia/sumo-logic-competitors-and-alternatives#logic?ts=markdown) * [Sumo Logic SIEM Competitors](https://www.paloaltonetworks.com/cyberpedia/sumo-logic-competitors-and-alternatives#seim?ts=markdown) * [Sumo Logic Competitors and Alternatives FAQs](https://www.paloaltonetworks.com/cyberpedia/sumo-logic-competitors-and-alternatives#faq?ts=markdown) * [Best SOAR Tools for 2026: Compare 10 Leading Platforms](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison?ts=markdown) * [SOAR Explained: Automating Your Security Response](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#explained?ts=markdown) * [SOAR vs SIEM vs XDR](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#vs?ts=markdown) vs IR Platforms * [Where SOAR Is Heading in 2026: Industry Trends](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#trends?ts=markdown) * [Best SOAR Tools for 2026](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#best?ts=markdown) * [Choosing a SOAR Platform: What Security Teams Should Look For](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#choosing?ts=markdown) * [SOAR Tools and Platforms FAQs](https://www.paloaltonetworks.com/cyberpedia/soar-tools-comparison#faqs?ts=markdown) * [Mastering MTTR: A Strategic Imperative for Leadership](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr?ts=markdown) * [Beyond "Repair": Other Meanings of MTTR](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#mttr?ts=markdown) * [Why Is MTTR Important for Cybersecurity?](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#why?ts=markdown) * [Understanding Key Cybersecurity Incident Metrics](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#metrics?ts=markdown) * [Key Components That Influence MTTR](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#key?ts=markdown) * [How to Measure MTTR Accurately](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#how?ts=markdown) * [MTTR Industry Benchmarks and Defining 'Good' Performance](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#performance?ts=markdown) * [Tactics That Effectively Reduce Cybersecurity MTTR](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#tactics?ts=markdown) * [MTTR in Cloud and Hybrid Environments](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#environments?ts=markdown) * [Executive-Level Reporting of MTTR](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#executive?ts=markdown) * [Future of Cybersecurity MTTR](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#future?ts=markdown) * [Frequently Asked Questions](https://www.paloaltonetworks.com/cyberpedia/mean-time-to-repair-mttr#faqs?ts=markdown) * [What Is a Security Operations Center (SOC)?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc?ts=markdown) * [SOC Challenges](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#soc?ts=markdown) * [SOC Roles and Responsibilities](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#roles?ts=markdown) * [Key SOC Functions and Tools](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#key?ts=markdown) * [SOC Delivery Models](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#models?ts=markdown) * [How Does a MSSP Differ from a SOC?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#mssp-differ-from-soc?ts=markdown) * [Best Practices for Optimizing SOC Performance](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#best?ts=markdown) * [The Future SOC Solution](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#future?ts=markdown) * [Security Operations Center (SOC) FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-a-soc#faqs?ts=markdown) * [How Do I Deploy SecOps Automation?](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation?ts=markdown) * [Preparing for SecOps Automation](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#preparing?ts=markdown) * [Start Simple with High-Impact Tasks](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#start?ts=markdown) * [Automation Benefits for Organizations of All Sizes](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#automation?ts=markdown) * [Peer Review and Approval](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#peer?ts=markdown) * [Secure a Champion for Automation](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#secure?ts=markdown) * [Defining Automation Use Cases](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#defining?ts=markdown) * [Example Use Cases: Phishing and Malware](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#example?ts=markdown) * [Selecting the Right SOAR Platform](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#selecting?ts=markdown) * [SOAR Deployment and Use Cases FAQs](https://www.paloaltonetworks.com/cyberpedia/guide-to-deploying-secops-automation#faqs?ts=markdown) * [Security Operations Center (SOC) Roles and Responsibilities](https://www.paloaltonetworks.com/cyberpedia/soc-roles-and-responsibilities?ts=markdown) * [The SOC Team: Roles and Responsibilities](https://www.paloaltonetworks.com/cyberpedia/soc-roles-and-responsibilities#the?ts=markdown) * [What Is the Role of a Security Operations Center (SOC)?](https://www.paloaltonetworks.com/cyberpedia/soc-roles-and-responsibilities#what?ts=markdown) * [What Are Best Practices for a Winning SOC Team?](https://www.paloaltonetworks.com/cyberpedia/soc-roles-and-responsibilities#best?ts=markdown) * [SOC Roles and Responsibilities FAQs](https://www.paloaltonetworks.com/cyberpedia/soc-roles-and-responsibilities#faqs?ts=markdown) * [What is SOC as a Service (SOCaaS)?](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service?ts=markdown) * [Which Cyber Threats are Monitored by SOCaaS?](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#which?ts=markdown) * [The Need Managed Security Services](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#need?ts=markdown) * [What are the Benefits of SOC as a Service (SOCaaS)?](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#what?ts=markdown) * [Factors to Consider When Designing a SOC](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#factors?ts=markdown) * [Why a Managed SOC is Important](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#important?ts=markdown) * [Challenges of a Managed SOC](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#challenges?ts=markdown) * [SOC as a service FAQs](https://www.paloaltonetworks.com/cyberpedia/soc-as-a-service#faqs?ts=markdown) * [How Do I Improve SOC Effectiveness?](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness?ts=markdown) * [Top Priorities for Improving SOC Effectiveness](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#top?ts=markdown) * [Integrating Threat Intelligence to Enhance SOC Effectiveness](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#integrating?ts=markdown) * [Security Tools that Improve SOC Effectiveness](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#security?ts=markdown) * [How Reports and Dashboards Improve SOC Effectiveness](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#how?ts=markdown) * [Investing in Training and Development Programs](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#investing?ts=markdown) * [How to Improve SOC Effectiveness FAQs](https://www.paloaltonetworks.com/cyberpedia/how-do-i-improve-soc-effectiveness#faqs?ts=markdown) * [How AI-Driven SOC Solutions Transform Cybersecurity: Cortex XSIAM](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions?ts=markdown) * [How Cortex XSIAM 2.0 Revolutionizes Security Operations](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#operations?ts=markdown) * [Cortex XSIAM Solutions and Advantages](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#cortex-xsiam-solutions-and-advantages?ts=markdown) * [Addressing Critical Issues in Current SOC Solutions](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#addressing-critical-issues?ts=markdown) * [How Cortex XSIAM Transforms the SOC](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#how?ts=markdown) * [Distinctive Features of Cortex XSIAM](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#features?ts=markdown) * [Comprehensive SOC Solutions: Single Platform Delivery Highlights](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#highlights?ts=markdown) * [Integrated Capabilities: The XSIAM Solutions Delivery](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#capabilities?ts=markdown) * [Ready to Transform Your Cybersecurity Landscape?](https://www.paloaltonetworks.com/cyberpedia/revolutionizing-soc-operations-with-ai-soc-solutions#cybersecurity-landscape?ts=markdown) # What Is Identity Threat Detection and Response (ITDR)? 5 min. read Table of Contents * * [Understanding ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#understanding?ts=markdown) * [ITDR vs Other Security Concepts (IAM, XDR, SIEM)](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#vs?ts=markdown) * [Key Components of ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#key?ts=markdown) * [Implementing Effective ITDR Strategies](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#strategies?ts=markdown) * [Identity-Based Attacks: Challenges and Solutions](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#solutions?ts=markdown) * [Future Trends in Identity Threat Detection and Response](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#future?ts=markdown) * [ITDR FAQs](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#faqs?ts=markdown) 1. Understanding ITDR * * [Understanding ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#understanding?ts=markdown) * [ITDR vs Other Security Concepts (IAM, XDR, SIEM)](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#vs?ts=markdown) * [Key Components of ITDR](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#key?ts=markdown) * [Implementing Effective ITDR Strategies](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#strategies?ts=markdown) * [Identity-Based Attacks: Challenges and Solutions](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#solutions?ts=markdown) * [Future Trends in Identity Threat Detection and Response](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#future?ts=markdown) * [ITDR FAQs](https://www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr#faqs?ts=markdown) Identity Threat Detection and Response (ITDR) is a cybersecurity framework and set of capabilities designed to protect identity and access infrastructure from [cyber attacks](https://www.paloaltonetworks.com/cyberpedia/what-is-a-cyber-attack?ts=markdown). ITDR solutions actively monitor, detect, and respond to threats targeting user accounts, privileged credentials, and identity systems, safeguarding an organization's critical access pathways. Key Points * With cloud adoption and remote work dissolving traditional perimeters, digital identities have become the primary control plane---and the most targeted vector in cyberattacks. \* Unlike IAM (which focuses on access control) or SIEM/XDR (which provide broad visibility), ITDR delivers deep, real-time insights and responses specifically for identity-based threats. \* ITDR uses AI/ML to detect anomalies in user behavior, helping identify sophisticated attacks like insider threats, lateral movement, and credential misuse that bypass traditional defenses. \* ITDR enables rapid detection and automated response---such as account isolation, access revocation, and step-up authentication---to stop identity threats before they escalate. \* ITDR will evolve to support Zero Trust Architecture, passwordless authentication, identity fabric, and quantum-resistant cryptography---ensuring identity security keeps pace with new technologies and threats. ## Understanding ITDR ITDR plays a critical role in modern cybersecurity. It focuses on how compromised identities pose a direct threat to an organization's digital assets, emphasizing proactive defense over reactive measures. ### The Shifting Perimeter---Identity as the New Control Plane Traditional cybersecurity models centered on network perimeters. Today, cloud adoption, remote work, and hybrid environments have dissolved these boundaries, elevating identity to the primary control plane. Users access resources from diverse locations and devices, making their identities---and the systems managing them---the most critical points of vulnerability. ITDR recognizes this fundamental shift, prioritizing the protection of digital identities as the foundation of secure operations. ### Why Identity-Based Attacks Predominate Attackers increasingly target identities because compromised credentials offer a direct, legitimate pathway into an organization's systems, often bypassing other security layers. They understand that it is often simpler to steal or manipulate a valid identity than to breach a hardened [network firewall](https://www.paloaltonetworks.com/cyberpedia/what-is-a-network-firewall?ts=markdown). ITDR directly confronts this reality by providing specialized tools and processes designed to detect and respond to these identity-centric attacks, which form the entry point for most major breaches. ### Bridging Security Gaps with ITDR Many organizations rely on a patchwork of security solutions, leaving gaps in identity protection. ITDR integrates with existing security tools, such as [Identity and Access Management (IAM)](https://www.paloaltonetworks.com/cyberpedia/what-is-identity-and-access-management?ts=markdown) and Privileged Access Management (PAM) systems, to create a cohesive defense. This integration provides a holistic view of identity activity across the entire digital estate. It closes blind spots by correlating data from various sources, ensuring that anomalous behavior, whether in a cloud application or an on-premises directory, triggers immediate alerts and automated responses. ## ITDR vs Other Security Concepts (IAM, XDR, SIEM) Identity Threat Detection and Response (ITDR) often overlaps with other cybersecurity functions, but it maintains a distinct focus. Understanding its unique role compared to Identity and Access Management (IAM), Extended Detection and Response (XDR), and Security Information and Event Management (SIEM) clarifies its critical contribution to enterprise security. ### ITDR versus [Identity and Access Management (IAM)](https://www.paloaltonetworks.com/cyberpedia/what-is-identity-and-access-management?ts=markdown) IAM focuses on prevention---managing who has access to what. It enforces policies such as multi-factor authentication and role-based controls, aiming to prevent unauthorized access before it occurs. ITDR focuses on detection and response---it assumes identities can be compromised despite IAM. ITDR actively monitors for misuses of legitimate credentials, privilege escalation, and lateral movement by attackers. It acts as a crucial safety net, catching threats that bypass preventive IAM measures. ### ITDR versus [Extended Detection and Response (XDR)](https://www.paloaltonetworks.com/cyberpedia/what-is-extended-detection-response-XDR?ts=markdown) XDR offers a broad, unified approach to threat detection and response across diverse security layers: endpoints, networks, cloud, email, and identity. It correlates telemetry from these sources for comprehensive visibility. ITDR is a specialized component within XDR. While XDR provides a wide lens, ITDR offers deep, granular insights into identity-centric threats. ITDR's specialized identity data enhances XDR's ability to identify complex, multi-stage attacks where identity compromise is a central component. ### ITDR versus [Security Information and Event Management (SIEM)](https://www.paloaltonetworks.com/cyberpedia/what-is-siem?ts=markdown) SIEM platforms aggregate and analyze log data from nearly all IT and security systems, providing a centralized view for compliance and broad threat detection. ITDR differs in its specialized analytical depth for identity. While SIEMs ingest identity logs, ITDR solutions are purpose-built to analyze identity-specific data---like authentication flows and directory changes---with sophisticated behavioral analytics. ITDR provides high-fidelity identity threat detections that a SIEM can then integrate to create a more comprehensive security picture. "With the addition of ITDR, the XSIAM platform now integrates all identity data sources into a single security data foundation spanning endpoints, networks and cloud. This allows our customers to run comprehensive AI-driven threat detection to protect against stealthy identity-driven attacks." ~Gonen Fink (Senior Vice President of Cortex Products at Palo Alto Networks) ## Key Components of ITDR ITDR solutions are built upon several core components that collectively enable their ability to monitor, detect, and respond to identity-based threats. These components work in concert to provide a comprehensive defense for an organization's identity infrastructure. ### Continuous Identity Visibility and Monitoring Effective ITDR begins with pervasive, real-time visibility into all identity-related activities across the entire IT landscape---on-premises, in the cloud, and across hybrid environments. This includes monitoring authentication attempts, access requests, privilege changes, directory modifications (e.g., Active Directory, Azure AD), and user behavior across applications and systems. It encompasses both human and non-human identities, such as service accounts and OAuth tokens, ensuring no identity goes unobserved. ### Behavioral Analytics and Anomaly Detection A cornerstone of ITDR, behavioral analytics establishes a baseline of normal identity behavior. It leverages [machine learning (ML)](https://www.paloaltonetworks.com/cyberpedia/machine-learning-ml?ts=markdown) and [artificial intelligence (AI)](https://www.paloaltonetworks.com/cyberpedia/artificial-intelligence-ai?ts=markdown) to analyze patterns in user activity, such as login times, locations, device usage, and resource access. Any significant deviation from this established baseline---like an unusual login from a new country, an attempt to access highly sensitive data outside regular working hours, or rapid privilege escalation---triggers an alert as a potential anomaly. This capability is crucial for identifying sophisticated attacks that might otherwise appear legitimate. ### Threat Intelligence Integration ITDR solutions integrate with external and internal threat intelligence feeds. This includes information on known attack techniques, indicators of compromise (IOCs) related to identity theft, and emerging identity-based threats. By correlating observed identity activity with [threat intelligence](https://www.paloaltonetworks.com/cyberpedia/what-is-cyberthreat-intelligence-cti?ts=markdown), ITDR can identify known malicious patterns and prioritize threats, enabling faster and more informed responses. ### Identity Security Posture Management (ISPM) Beyond just detecting threats, ITDR solutions often include capabilities for assessing and managing the security posture of the identity infrastructure itself. This involves continuously identifying misconfigurations, excessive permissions, shadow IT identities, and other vulnerabilities that attackers could exploit. ISPM helps proactively harden identity systems, reducing the overall attack surface and minimizing the likelihood of successful identity-based attacks. ### Automated and Manual Response Capabilities Upon detecting a threat, ITDR facilitates rapid response. This can include automated actions like: * Enforcing step-up authentication (e.g., requiring [MFA](https://www.paloaltonetworks.com/cyberpedia/what-is-multi-factor-authentication?ts=markdown)) for suspicious logins. * Temporarily blocking or disabling compromised accounts. * Revoking suspicious sessions or access tokens. * Isolating affected systems or users. * Automatically resetting passwords. In addition to automation, ITDR provides security teams with the necessary context and tools for manual investigation and remediation, such as detailed logs, forensic data, and guided workflows to contain and eradicate complex threats. ### Integration with Existing Security Ecosystems For maximum effectiveness, ITDR solutions integrate seamlessly with an organization's broader security stack. This includes feeding high-fidelity identity alerts to SIEMs for correlation with other security data, sharing context with XDR platforms for holistic threat investigation, and working with IAM and PAM systems to enforce and update access policies based on real-time threat intelligence. This interoperability ensures that identity security is a cohesive part of the overall cybersecurity strategy. ## Implementing Effective ITDR Strategies Successful ITDR implementation requires strategic planning, comprehensive tooling, and ongoing operational commitment. Organizations must strike a balance between security effectiveness and operational efficiency while maintaining user productivity. ![Cortex Identity Use Cases](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/identity-threat-detection-and-response/cortex-identify-use-cases.png "Cortex Identity Use Cases") ### Developing a Comprehensive Cybersecurity Strategy A strong cybersecurity strategy hinges on several key elements: * [**Risk Assessment**](https://www.paloaltonetworks.com/cyberpedia/cybersecurity-risk-assessment?ts=markdown): This foundational step involves pinpointing critical assets, high-value accounts, and possible attack routes. Understanding the organization's specific risk landscape is crucial for effective resource allocation and prioritizing security measures. * **Integration Planning** : ITDR solutions should integrate smoothly with the current security setup. Successful deployments utilize data from various sources, including network security tools, [endpoint protection](https://www.paloaltonetworks.com/cyberpedia/what-is-endpoint-protection?ts=markdown), and identity management, to achieve broad threat visibility. * **Policy Development** : Establishing clear guidelines for acceptable use, access protocols, and [incident response](https://www.paloaltonetworks.com/cyberpedia/what-is-incident-response?ts=markdown) is essential. Well-defined policies enable automated systems to distinguish between regular activity and potential threats, while also guiding the security team's actions. * **Stakeholder Alignment**: Collaboration among IT, security, HR, and business executives is crucial for developing effective governance structures and response plans. This cross-departmental approach ensures ITDR efforts support business goals while upholding necessary security standards. ### Solutions for Managing Identity Threats Effective ITDR relies on sophisticated capabilities that automate responses, streamline investigations, prioritize risks, and maintain continuous oversight of identity-related activities. These features enable security teams to manage the dynamic landscape of identity threats efficiently. #### Automated Response Capabilities Automated response functions enable rapid threat containment without requiring immediate human intervention. Systems can automatically disable suspicious accounts, enforce additional authentication requirements, or restrict access to sensitive resources. This swift action helps to limit an attacker's window of opportunity while security teams investigate potential incidents. #### Investigation Workflows Streamlined investigation workflows simplify the process of analyzing security alerts and performing forensic analysis. Integrated platforms provide security analysts with crucial context, relevant historical data, and recommended actions. This information helps accelerate incident response activities and ensures a more thorough understanding of the threat. #### Risk Scoring Mechanisms Risk scoring mechanisms prioritize security alerts based on their potential impact and the likelihood of a successful attack. These scoring systems help security teams focus attention on the most critical threats, effectively managing alert fatigue and optimizing resource allocation. #### Continuous Monitoring Frameworks Continuous monitoring frameworks deliver ongoing visibility into identity-related activities across the entire IT environment. Comprehensive monitoring covers authentication events, permission changes, data access patterns, and administrative activities. This constant oversight enables organizations to detect anomalous behavior as it occurs, providing a resilient defense against evolving identity threats. ### Enhancing Security Posture through Visibility and Monitoring Effective Identity Threat Detection and Response (ITDR) significantly enhances an organization's security posture by providing unparalleled visibility and robust monitoring capabilities. These tools transform raw data into actionable intelligence, enabling swift identification and remediation of identity-based threats. #### Centralized Dashboards Centralized dashboards aggregate identity security metrics and threat indicators into unified, easy-to-assess interfaces. Effective dashboards highlight critical alerts, trend analysis, and key performance indicators, providing a clear overview without overwhelming security teams with excessive detail. This consolidation enables security professionals to assess their current identity security standing quickly. #### Forensic Capabilities Comprehensive forensic capabilities enable detailed investigation of security incidents through comprehensive logging and extensive data retention. Analysts can reconstruct attack timelines, identify affected systems, and determine the scope of potential compromises. These features are vital for understanding how [breaches](https://www.paloaltonetworks.com/cyberpedia/data-breach?ts=markdown) occurred and for ensuring the complete eradication of threats. #### Compliance Reporting ITDR solutions generate essential documentation for regulatory requirements and internal governance processes. Automated reporting capabilities reduce administrative overhead, enabling organizations to demonstrate adherence to various security standards and frameworks. This streamlines audit preparations and proves due diligence in protecting identities. #### Performance Metrics Tracking performance metrics allows organizations to measure the effectiveness of their ITDR implementations. Measurable indicators include detection rates, response times, and false favorable ratios. Regular assessment of these metrics enables continuous improvement of [security operations](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations?ts=markdown), ensuring the ITDR strategy remains optimized and responsive to evolving threats. ## Identity-Based Attacks: Challenges and Solutions Identity-based attacks present unique challenges that require specialized approaches and dedicated resources. Organizations must overcome technical, operational, and organizational obstacles to implement effective identity threat protection. ### Common Identity-Based Threats [**Credential stuffing attacks**](https://www.paloaltonetworks.com/cyberpedia/credential-stuffing?ts=markdown): exploit reused passwords across multiple services by testing large volumes of username-password combinations against target systems. Attackers leverage credential databases from previous breaches to gain unauthorized access to organizational resources. **[Phishing](https://www.paloaltonetworks.com/cyberpedia/what-is-phishing?ts=markdown) campaigns** : target users with sophisticated [social engineering](https://www.paloaltonetworks.com/cyberpedia/what-is-social-engineering?ts=markdown) techniques designed to steal credentials or trick users into installing malware. Modern phishing attacks frequently impersonate trusted services, utilize legitimate-looking domains, and incorporate personalized content to enhance their success rates. **Privilege escalation** : involves attackers who have gained initial access attempting to obtain higher-level permissions within target systems. Successful privilege escalation enables attackers to access [sensitive data](https://www.paloaltonetworks.com/cyberpedia/sensitive-data?ts=markdown), modify system configurations, and establish persistent access mechanisms. **Account takeover**: occurs when attackers gain complete control of legitimate user accounts through various mean, including credential theft, session hijacking, or exploitation of authentication vulnerabilities. Compromised accounts provide attackers with legitimate access paths that bypass many traditional security controls. **Malicious insider activities**: encompass a range of threats from current or former employees who abuse their authorized access privileges. Insider threats can involve data theft, sabotage, fraud, or unauthorized disclosure of sensitive information. ### Overcoming Challenges in Identity Protection Implementing and maintaining strong ITDR faces common hurdles. Organizations must address challenges such as alert fatigue, false positives, scalability, and skill shortages to realize the benefits of their ITDR investments fully. #### Alert Fatigue Security teams often grapple with overwhelming volumes of alerts, leading to alert fatigue and potentially missed genuine threats. Advanced ITDR solutions combat this through intelligent alert prioritization, automated triage capabilities, and risk-based scoring. This approach enables analysts to focus their attention on the most critical threats, thereby improving operational efficiency and response times. #### False Positive Reduction Minimizing false positives---i.e., benign activities incorrectly flagged as malicious---is crucial for maintaining trust in ITDR systems and preventing unnecessary investigations. This requires sophisticated analytics engines that deeply understand normal business operations and user behaviors. Machine learning algorithms continuously refine detection capabilities, reducing noise while maintaining sensitivity to actual security threats. #### Scalability Concerns As organizations expand and their identity infrastructures grow increasingly complex, scalability concerns become prominent. Cloud-native ITDR platforms address this by providing the necessary scalability to monitor large user populations and distributed IT environments without experiencing performance degradation. These platforms adapt to changing demands, ensuring consistent protection. #### Skills Shortage The widespread cybersecurity skills shortage impacts many organizations trying to implement and operate advanced security technologies. To overcome these staffing constraints, organizations can leverage managed ITDR services or platforms with built-in intelligence. These solutions offer expert-level detection and response capabilities, eliminating the need for extensive in-house expertise and bridging the talent gap. ### Case Studies: Successful ITDR Implementations Real-world applications demonstrate the tangible benefits of a well-executed ITDR strategy. These examples highlight how ITDR directly safeguards critical assets and prevents potentially catastrophic security incidents. #### Financial Services Organization A major financial services organization implemented comprehensive ITDR to protect sensitive customer data and ensure regulatory compliance. Their ITDR solution successfully detected a sophisticated insider threat involving unauthorized access to customer financial records. This proactive detection prevented a significant data breach, avoiding substantial regulatory penalties and severe reputational damage. #### Healthcare System A large healthcare system deployed ITDR technologies to secure electronic health records and protect patient privacy. The ITDR system identified anomalous access patterns that revealed staff members were unauthorizedly viewing celebrity patient records. This detection enabled swift corrective action, effectively preventing potential [HIPAA](https://www.paloaltonetworks.com/cyberpedia/what-is-hipaa?ts=markdown) violations and maintaining patient trust. #### Technology Company A leading technology company utilized ITDR solutions to safeguard its intellectual property and critical development environments. The ITDR platform detected suspicious file access patterns indicating a compromised developer account was actively stealing proprietary source code. Security teams contained the incident before significant data loss occurred, protecting vital company assets. ## Future Trends in Identity Threat Detection and Response Identity security continues evolving as organizations adopt new technologies and attackers develop more sophisticated techniques. Future ITDR capabilities will need to address emerging challenges while leveraging advanced technologies to improve detection and response effectiveness. ### Emerging Technologies in ITDR Several key technological advancements will shape the future of ITDR, pushing its capabilities further into proactive and adaptive defense. ![Infographic explaining how identity is a key pillar of zero trust: identity visibility, value to multiple buying centers, reduced staffing pressure, and ensures complete visibility.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/identity-threat-detection-and-response/identity-as-key-pillar-of-zero-trust.png "Identity as a Key Pillar of Zero Trust") #### [Zero Trust Architecture](https://www.paloaltonetworks.com/cyberpedia/what-is-a-zero-trust-architecture?ts=markdown) Zero Trust Architecture fundamentally changes how organizations approach identity security. It eliminates implicit trust, requiring continuous verification of user and device identities regardless of their location. ITDR solutions will need to integrate more deeply with Zero Trust frameworks to provide granular access controls and continuous risk assessment based on real-time identity and device posture. #### Passwordless Authentication Passwordless authentication significantly reduces reliance on traditional credentials, utilizing methods such as biometric authentication, hardware tokens, and cryptographic certificates. ITDR platforms must adapt to monitor these new authentication methods effectively. They will need to detect attempts to bypass or compromise passwordless systems, ensuring these advanced methods do not introduce new vulnerabilities. #### Identity Fabric The concept of an identity fabric represents a distributed approach to identity management, spanning multiple environments and platforms. Future ITDR solutions will need to provide seamless visibility and control across complex identity fabrics that encompass on-premises, multicloud, and hybrid environments. This ensures consistent security posture and threat detection regardless of where an identity or resource resides. #### Quantum-Resistant Cryptography As [quantum computing](https://www.paloaltonetworks.com/cyberpedia/what-is-quantum-security?ts=markdown) capabilities advance, they pose a significant threat to current encryption standards. [Quantum-resistant cryptography](https://www.paloaltonetworks.com/cyberpedia/what-is-post-quantum-cryptography-pqc?ts=markdown) will become essential to secure communications and data. ITDR systems must prepare for the transition to quantum-resistant algorithms while maintaining compatibility with existing identity infrastructure. This proactive approach will safeguard identity systems against future cryptographic attacks. ### The Role of AI and Machine Learning in Enhancing ITDR AI and machine learning (ML) are not just buzzwords in Identity Threat Detection and Response (ITDR)---they are fundamental to its evolution. These technologies empower ITDR to move beyond traditional, rule-based detection, enabling more sophisticated analysis, predictive capabilities, and rapid, intelligent responses to identity threats. #### Advanced Behavioral Analytics ITDR will leverage increasingly sophisticated AI algorithms for advanced behavioral analytics. These algorithms will detect even the most subtle anomalies in user behavior that might indicate compromise or malicious intent. [Deep learning](https://www.paloaltonetworks.com/cyberpedia/what-is-inline-deep-learning?ts=markdown) models will analyze complex patterns across multiple data sources, uncovering threats that traditional rule-based systems simply cannot identify. This means catching [insider threats](https://www.paloaltonetworks.com/cyberpedia/insider-threat?ts=markdown) and highly disguised external attacks. #### Predictive Threat Modeling AI will enable ITDR systems to perform predictive threat modeling. This allows ITDR to anticipate potential attacks based on environmental factors, current threat intelligence, and historical attack patterns. These predictive capabilities will help organizations implement proactive defenses, shifting from a purely reactive stance to one that anticipates and prepares for identity-based threats before they fully materialize. #### Automated Incident Response As AI systems mature, automated incident response will become far more sophisticated. AI will gain the ability to make complex decisions about threat containment and remediation, dramatically reducing response times. This advanced automation will ensure that appropriate actions are taken based on the specific threat severity and an organization's pre-defined security policies, freeing up human analysts for more complex tasks. #### Natural Language Processing Natural Language Processing (NLP) will significantly improve threat intelligence analysis and incident documentation. NLP will automatically process vast amounts of unstructured data, including security reports, threat feeds, and internal communications. This capability helps ITDR systems quickly identify relevant security information and context, allowing analysts to piece together incident details more efficiently and accurately. ### Preparing for Future Cybersecurity Challenges The cybersecurity landscape continues to evolve rapidly, presenting new challenges for identity protection. ITDR must adapt and expand its scope to address these emerging threats and ensure long-term resilience. #### Supply Chain Security Supply chain attacks are increasingly common, making supply chain security a critical area for ITDR. Future solutions will need to monitor third-party access and vendor activities more closely. Organizations require granular visibility into how external partners and suppliers access their systems and data to detect and prevent compromises originating from extended networks. #### IoT and Operational Technology (OT) Integration The growing integration of [IoT](https://www.paloaltonetworks.com/cyberpedia/what-is-iot-security?ts=markdown) and [operational technology (OT)](https://www.paloaltonetworks.com/cyberpedia/what-is-ot-security?ts=markdown) will expand the scope of identity security beyond traditional IT environments. This includes industrial control systems, smart devices, and other connected technologies that often have limited inherent security capabilities. ITDR will need to extend its monitoring and response to these devices and the identities associated with them, securing critical infrastructure. #### Evolving Regulatory Compliance Regulatory compliance requirements will continue to evolve as governments implement new privacy and security regulations globally. ITDR platforms must provide the robust documentation and controls needed to demonstrate adherence to emerging regulatory frameworks, such as enhanced data privacy laws or industry-specific mandates. This ensures organizations can prove due diligence in protecting identities and sensitive information. #### Skills Development Skills development will remain critical. Organizations must focus on building internal capabilities for managing advanced identity security technologies. Comprehensive training programs and certification paths will help security professionals develop the essential expertise in ITDR implementation, operation, and incident response, bridging the talent gap in this specialized field. ## ITDR FAQs ### How does ITDR differ from traditional Identity and Access Management (IAM)? While IAM focuses on controlling who has access to what resources, ITDR goes beyond access control to actively monitor, detect, and respond to threats targeting identities. IAM is primarily preventive, managing permissions and authentication, whereas ITDR is detective and responsive, continuously analyzing identity behaviors and activities to identify potential compromises or malicious activities in real-time. ### What types of identity-based threats does ITDR help detect? ITDR helps detect various identity-based threats including credential theft, account takeovers, privilege escalation attacks, insider threats, compromised service accounts, lateral movement using stolen credentials, and identity-based persistence techniques. It also identifies suspicious login patterns, unusual access behaviors, and attempts to exploit identity systems or directories. ### Can ITDR integrate with existing security tools like SIEM and XDR platforms? Yes, ITDR solutions are designed to integrate with existing security infrastructure including SIEM, XDR, SOAR platforms, and other security tools. This integration enables centralized threat correlation, automated response workflows, and comprehensive visibility across the entire security stack. ITDR enriches existing security data with identity-specific context and threat intelligence. ### What role does artificial intelligence play in ITDR solutions? AI and machine learning are crucial for ITDR effectiveness, enabling behavioral analytics to establish baseline user patterns, anomaly detection to identify deviations from normal behavior, automated threat scoring and prioritization, and predictive analytics to anticipate potential identity compromises. AI helps reduce false positives while improving detection accuracy and response speed. ### How quickly can ITDR solutions detect and respond to identity threats? Modern ITDR solutions can detect identity threats in near real-time, often within minutes of suspicious activity occurring. Response times vary based on the threat severity and configured automation, but automated responses like account isolation or access revocation can happen within seconds to minutes. Manual investigation and remediation may take longer depending on the complexity of the threat and organizational processes. Related Content [Cortex ITDR Webpage Stop identity-based attacks with Cortex ITDR.](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [What's New in Cortex ITDR 2.0 Blog Read our latest innovations for our SecOps platform.](https://www.paloaltonetworks.com/blog/security-operations/identity-meets-the-soc-redefining-the-last-perimeter/) [Cortex ITDR Module Break down the modern identity threat landscape with the solution brief.](https://www.paloaltonetworks.com/resources/techbriefs/identity-threat-detection-and-response-module?ts=markdown) [ITDR At a Glance: Identity Threat Detection Idira Identity Security Platform: Detect and stop identity threats in near real time.](https://www.paloaltonetworks.com/resources/techbriefs/threat-detection-and-response?ts=markdown) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=What%20Is%20Identity%20Threat%20Detection%20and%20Response%20%28ITDR%29%3F&body=Explore%20ITDR%20methodologies%20and%20tools%20designed%20for%20cybersecurity%20professionals%20to%20enhance%20defenses%20against%20identity%20threats%20and%20ensure%20data%20protection.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/identity-threat-detection-and-response-itdr) Back to Top [Previous](https://www.paloaltonetworks.com/cyberpedia/what-is-security-operations?ts=markdown) What Is Security Operations (SecOps)? Comprehensive Guide [Next](https://www.paloaltonetworks.com/cyberpedia/sumo-logic-competitors-and-alternatives?ts=markdown) Best Sumo Logic Competitors \& Alternatives for 2026 {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center-subscribe.html) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language